The AWS Certified Solutions Architect – Associate (SAA-C03) exam tests your ability to design distributed systems on AWS. It is one of the most sought-after certifications in the cloud domain.
What happens when a Security Group is modified to remove rules for an active EC2 instance?
ATraffic stops immediately
BTraffic continues until restart
CInstance automatically terminates
DNo impact on current sessions
Explanation
Removing rules does not disrupt existing connections, but prevents new ones based on the new rules.
Q322
Which service provides a managed Kubernetes experience on AWS?
AAmazon EKS
BAmazon ECS
CAWS Lambda
DAmazon RDS
Explanation
Amazon EKS specifically offers a managed Kubernetes service, while the others serve different purposes.
Q323
A company needs to ensure low-latency access to its S3 objects from multiple geographic regions. What should they configure?
AS3 Transfer Acceleration
BS3 Cross-Region Replication
CCloudFront Distribution
DS3 Event Notification
Explanation
CloudFront provides low-latency, regional access through caching, while the other options do not optimize for latency in this way.
Q324
You are configuring IAM Roles for EC2 instances. What happens when an instance assumes a role with limited permissions?
ALimits access for the instance only.
BGrants all AWS services access.
CNo access if permission revoked.
DPermits access until role is deleted.
Explanation
Permissions are limited to what the role allows, while other options incorrectly describe AWS behavior.
Q325
Which service provides serverless compute for containers?
AAWS Fargate
BAmazon EC2
CAWS Lambda
DAWS Batch
Explanation
AWS Fargate offers serverless compute, while EC2, Lambda, and Batch have different architectures or use cases.
Q326
A company needs to integrate an on-premises data store with AWS while maintaining low latency during access. Which AWS service should they use?
AAWS Storage Gateway
BAmazon RDS
CAWS Snowball
DAmazon VPC
Explanation
AWS Storage Gateway facilitates seamless integration with real-time data access, unlike the other options.
Q327
You are configuring an IAM policy that allows access to a specific S3 bucket. What happens if the bucket policy denies access?
AAccess is allowed due to IAM policy.
BAccess is denied regardless of IAM.
CAccess is granted for IAM users.
DAccess depends on S3 bucket permissions.
Explanation
A deny in the bucket policy overrides any IAM permissions given, thus access is blocked.
Q328
Which service can provide consistent low-latency access for globally distributed applications?
AAmazon ElastiCache
BAmazon RDS
CAWS Global Accelerator
DAmazon DynamoDB
Explanation
AWS Global Accelerator improves performance by routing traffic to optimal endpoints, providing low-latency access globally. ElastiCache is for caching, RDS is for databases, and DynamoDB is not optimized for latency.
Q329
A company needs to deliver a software package to many users while ensuring tamper-proof integrity and immutability; which service fits best?
AAWS Lambda
BAmazon S3 with Object Lock
CAWS CodeDeploy
DAmazon EC2
Explanation
Amazon S3 with Object Lock ensures data cannot be deleted or altered, providing needed integrity and immutability. Lambda is for code execution, CodeDeploy is for deployment, and EC2 is a compute service.
Q330
What happens when an IAM role is assumed by an EC2 instance?
AThe instance gets manual permissions only
BTemporary credentials are granted
CPermanent access is granted
DThe role becomes disabled
Explanation
When an IAM role is assumed, the EC2 instance receives temporary security credentials that allow it to access assigned resources. Manual permissions and permanent access options are incorrect, as roles provide temporary access.